
fnprint
match functions in binaries by what they do, not what their bytes look like. behavioral function fingerprinting via microexecution.

match functions in binaries by what they do, not what their bytes look like. behavioral function fingerprinting via microexecution.

A script to detect stack-strings by using emulation (leveraging Unicorn)

x64 Dynamic Reverse Engineering Toolkit

Golang bindings for PE-sieve

VMUnprotect.Dumper can dynamically untamper VMProtected Assembly.

An API hooking framework for intercepting and monitoring Windows applications

An strace-like program for the Windows 'native' API

MAPS cloud scanner and response parser for Microsoft Defender research.

ExportHider: Generating Export Table during Runtime to Hide the Exported Functions from the DLL File.

A curated list of Android Security materials and resources For Pentesters and Bug Hunters

NebulaPulsar is a proof-of-concept in-memory implant framework for Java (JSP) and ASP.NET (ASPX/ASHX/ASMX) webshells, originally developed as part of…